| kolusu Site Admin
 
  
 
 Joined: 26 Nov 2002
 Posts: 12394
 Topics: 75
 Location: San Jose
 
 | 
			
				|  Posted: Tue Jul 19, 2016 10:57 am    Post subject: Re: SMF 80... |   |  
				| 
 |  
				|  	  | raj051076 wrote: |  	  | I tried my best to read and find a solution myself which I thought I will share. But I am stuck:( 
 I am trying to extract information from SMF80DTA to get the resource name but could not find out the right way to do it. I have read the manuals and understood that I need to take the base offset from SMF80RL2(which I did) for the relocation section. But then how do I parse the relocation section? Any help with this will be much appreciated. I am trying to create a RACF event log report from this data
 
 Thanks
 Rajib
 | 
 
 Rajib,
 
 SMF80DTA is based off the offset that is stored in SMF80REL and NOT SMF80RL2. Resource name is the first field in the SMF80DTA.
 
 Secondly I am not even sure as to why you want to re-invent the wheel when there are RACF reporter utilities which would generate the reports for you.
 
 Check out RACF Security Server Auditor's Guide for for samples of  RACF Report Writer
 
 Something like this
 
 The RACF report writer
 
 Sample RACFRW CONTROL Report statements
 
 Sample job
 
  	  | Code: |  	  | //STEP0100 EXEC PGM=IFASMFDP
 //SYSPRINT DD  SYSOUT=*
 //SYSUDUMP DD  SYSOUT=*
 //SYSUT1   DD  DISP=SHR,DSN=Your Input SMF DSN
 //SYSUT2   DD  DSN=&&TYPE80,DISP=(NEW,PASS),
 //             UNIT=(SYSDA,4),SPACE=(CYL,(100,50),RLSE)
 //*
 //SYSIN    DD   *
 INDD(SYSUT1,OPTIONS(DUMP))
 OUTDD(SYSUT2,TYPE(80))
 /*
 //********************************************************************
 //**  GENERATE THE REPORT FOR VIOLATIONS                            **
 //********************************************************************
 //STEP0200 EXEC PGM=IKJEFT01
 //SORTWK01 DD UNIT=SYSDA,SPACE=(CYL,(40,10),RLSE)
 //SYSPRINT DD SYSOUT=*
 //SYSTSPRT DD SYSOUT=*
 //RSMFIN   DD DISP=(SHR,PASS,DELETE),DSN=&&TYPE80
 //SYSTSIN  DD *
 RACFRW TITLE('RACF REPORTS') GENSUM
 SELECT VIOLATIONS
 LIST TITLE('ACCESS VIOLATIONS SUMMARY REPORT')
 SUMMARY RESOURCE BY(USER)
 END
 //*
 | 
 _________________
 Kolusu
 www.linkedin.com/in/kolusu
 |  |